VIRUS INFORMATION

01/31/2001 - The Flor virus is a memory resident trojan written in Visual Basic. The Visual Basic runtime files VBRUN500.DLL and higher are required for this program to function. Once the program is loaded into memory, every 60 seconds, it attempts to copy itself to "A:\Pornografia.exe" and to "c:\windows\menu iniciar\programas\iniciar\" (the STARTUP folder on the Portuguese version of Windows). Additionally, the trojan attempts to go to a URL in the www3.cybercities.com domain. 

SYMPTOMS

Floppy drive activity regardless of the presence of a diskette.
File Pornografia.exe being present on floppy diskettes or on the hard drive.

HOW TO CLEAN VIRUS

Obtain the latest update DAT file from Virus Scanner companies page and use the Virus Scanner to clean the hard disk drive.